PCI DSS v4.0/Requirement 01: Install and Maintain Network Security Controls/10 of 250
1.2.8Network security controls (NSCs) are configured and maintained
Control family: Requirement 01: Install and Maintain Network Security Controls
Control description
Defined Approach Requirements:
Configuration files for NSCs are:
- secured from unauthorized access.
- kept consistent with active network configurations.
Defined Approach Testing Procedures:
1.2.8 Examine configuration files for NSCs to verify they are in accordance with all elements specified in this requirement.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.